General
- Target https://cdn.discordapp.com/attachments/1519412732233781293/1521189339542065342/Xeno-v1.3.55.exe?ex=6a469078&is=6a453ef8&hm=4b720b454cda742967b067d72aebcd7ef769fdaf03317bd3e7b46f7a11972a4e&
- Sample260702-acl2vshy31
Score
8/10
Malware Config
Targets
-
- Target https://cdn.discordapp.com/attachments/1519412732233781293/1521189339542065342/Xeno-v1.3.55.exe?ex=6a469078&is=6a453ef8&hm=4b720b454cda742967b067d72aebcd7ef769fdaf03317bd3e7b46f7a11972a4e&
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.